Wisconsin · verified through August 25, 2026

Wisconsin: law status and evidence context.

Law status, direct attached-library attribution, and public enforcement context are shown separately. A zero direct total does not mean no enforcement exists.

WI · 6 requirements mapped / control outcomes supported

Law status

No verified general comprehensive law

No comprehensive consumer privacy law verified (AB 466 (2023) was a pending bill)

Official name / citation
n.a.
Status / effective date
Bill only
Principal enforcer
Wisconsin Attorney General (Department of Justice); Office of the Commissioner of Insurance for insurance data security

Direct attached-library attribution

0 cases · $0

These totals are assigned solely by the attachment’s state heading. Shared multistate totals are not allocated in full to every state.

The attached library does not enumerate participant-level allocations for every multistate matter; shared settlement totals are presented once at the national level and are not duplicated into state totals.

Official law sources

Other generally applicable PII law

Wis. Stat. § 134.98, notice of unauthorized acquisition of personal information - https://docs.legis.wisconsin.gov/statutes/statutes/134/98 ; insurance data security: 2021 Wis. Act 73, Wis. Stat. §§ 601.95-601.956

Public enforcement context

Tier 1

Anthem, Inc.

$39.5 million total; Wisconsin share stated as $141,970 · September 30, 2020

Wisconsin joined the multistate Anthem settlement over the 2014 breach affecting 78.8 million people.

Legal basis: State consumer protection and data-security claims

Official case source (opens in a new tab)

Mapped control outcomes

1 personal data inventory/data map; 2 sensitive-data discovery; 3 downstream copy tracking; 8 breach blast-radius analysis; 9 retention/minimization; 10 regulator audit evidence

Kestryl can evidence where regulated personal data actually resides across structured stores and unstructured attachments/images, produce audit rows and evidence packs showing when each location was discovered and reviewed, and apply structured-data remediation modes (mask, vault, strip) to reduce exposure. It does not alter source attachments or documents, and its output is technical evidence supporting controls, not proof of legal compliance.